> For the complete documentation index, see [llms.txt](https://docs.guardware.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.guardware.com/protect/reports-and-configs/reports.md).

# Reports

## Events Reports

The **Events Reports** section provides a summary of all protection-related actions performed by users. This helps you understand user behaviour, identify high-volume activity, and detect unusual patterns.

<figure><img src="/files/jwKN1S5zd2fDb7g0anan" alt=""><figcaption></figcaption></figure>

**To view events reports:**

1. Go to **PROTECT > Events Reports.**
2. **Select a date range** to filter user activity within a specific period. You’ll see a list of users with the following details:

<table><thead><tr><th width="214">Column</th><th>Description</th></tr></thead><tbody><tr><td>Username</td><td>Name of the user performing the actions.</td></tr><tr><td>Add Protection</td><td>Number of times the user applied protection to a file.</td></tr><tr><td>Remove Protection</td><td>Number of times the user removed protection from files.</td></tr><tr><td>Change Protection</td><td>Number of times the user changed protection of files.</td></tr><tr><td>Add Expiry</td><td>Number of times the user added an expiry date.</td></tr><tr><td>Restrict Circulation</td><td>Number of times the user restricted file circulation.</td></tr><tr><td>Share with HTML</td><td>Number of times the user created a securel HTML.</td></tr><tr><td>Share with MIP</td><td>Number of times the user shared files using Microsoft Information Protection.</td></tr><tr><td>Share with ZIP</td><td>Number of times the user created password-protected ZIP packages.</td></tr><tr><td>Access</td><td>Number of times the user accessed protected files.</td></tr><tr><td>Save As</td><td>Number of times the user saved protected files as new copies.</td></tr></tbody></table>

3. Click any record to view further details, such as the name of the protected file, file path, location of users who accessed protected files, classification of the file, justification message, and timestamp of the action performed.

<figure><img src="/files/HOMQw8RQRo5X2ynR8UuD" alt=""><figcaption></figcaption></figure>

## Files Reports

The **Files Reports** section provides a detailed audit trail of all file-related activities within PROTECT. This report helps you track which files were accessed, modified, or interacted with, and by whom.

<figure><img src="/files/jg2liGQ4vE9CqlI9XMpO" alt=""><figcaption></figcaption></figure>

**To view files reports:**

1. Go to **PROTECT > Files Reports**.
2. **Select a date range** to filter file activities within a specific period. You’ll see a list of users with the following details:

<table><thead><tr><th width="235">Column</th><th>Description</th></tr></thead><tbody><tr><td>File Name</td><td>Name of the file that was accessed or modified.</td></tr><tr><td>File Path</td><td>Location of the file on the device or network.</td></tr><tr><td>No. of Activities</td><td>Total number of actions performed on the file.</td></tr><tr><td>Last Activity From</td><td>The user who last performed an action on the file.</td></tr><tr><td>Last Activity</td><td>Type of the last action (e.g., add protection, remove protection).</td></tr><tr><td>Last Activity Time</td><td>Timestamp of the last action.</td></tr><tr><td>Expiry At</td><td>Expiry date applied to the file.</td></tr><tr><td>PC Name</td><td>Name of the computer where the activity occurred.</td></tr><tr><td>Classification Label</td><td>Classification applied to the file (e.g., Restricted, Internal).</td></tr></tbody></table>

3. Click on any file to view further details such as the action performed on the file, the user who performed the action, the justification message, and the timestamp of the action performed.&#x20;

<figure><img src="/files/cqS7mYnY5Fp1SN6bUGqD" alt=""><figcaption></figcaption></figure>

## Decrypt Files Reports

The **Decrypt File Report** section displays details of file decryption activities performed on devices.

You can filter and refine the report using the following options:

* **From / To**: Select a date range to view decryption activities within a specific period.
* **Status**: Filter results based on the decryption status.
* **Search**: Search for specific records using keywords such as file path, PC name, or user.

The report table includes the following information:

* **File Path**: Location of the decrypted file.
* **Date**: Date when the decryption activity occurred.
* **PC Name**: Name of the device on which the file was decrypted.
* **User**: The specific user account on the device for which the file was decrypted.
* **Status**: Outcome of the decryption action.

## Agent Log Files

The **Agent Log Files** section displays PROTECT agent log files collected from devices.

You can refine the results using the following options:

* **From / To**: Select a date range to view log files generated within a specific period.
* **Search**: Search for specific log entries using keywords such as file path, PC name, user, or log type.

The table includes the following information:

* **File Path**: Location of the log file on the device.
* **Date**: Date when the log was generated or uploaded.
* **PC Name**: Name of the device from which the log was collected.
* **User**: The specific user account on the device associated with the log entry.
* **Log Type**: Type or category of the log.
* **Action**: Available actions for the log file, such as downloading.

## Activity Logs

The **Activity Logs** section provides a record of activities performed in PROTECT. It helps administrators monitor configuration changes, policy updates, user assignments, and other administrative activities for auditing and troubleshooting.

You can refine the results using the following options:

* **From / To**: Select a date range to view log files generated within a specific period.
* **Search**: Search for specific log entries using keywords.
* **Activity**: Filter logs by a specific activity type.

The table includes the following information:

* **Activity**: The type of action performed.
* **Description:** Details of the action, including the changes made.
* **User:** The user who performed the action.
* **Date**: The date and time when the activity occurred.

<figure><img src="/files/SNyLSpeKHQSkJIMnPNup" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.guardware.com/protect/reports-and-configs/reports.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.